[Openswan dev] IPSECPOLICY flag in Makefile.inc
mcr at sandelman.ottawa.on.ca
Fri Jul 2 17:44:31 CEST 2004
-----BEGIN PGP SIGNED MESSAGE-----
>>>>> "Herbert" == Herbert Xu <herbert at gondor.apana.org.au> writes:
>> eventually c) ask that a new connection be secure
Herbert> This bit can already be done with 26sec, at least with
(Please recall that I spent 4 years working with KAME before being
hired onto the FreeS/WAN team. I worked on the NRL and Sun code that
the RFCs that KAME was based upon were based upon.)
Actually, 26sec and racoon can not do what is proposed.
You can say, "I want this secure", and you can say "I want to form a
tunnel with FOO", but you can not specify what the identity of the
remote system is supposed to be.
The sockopt interface is pretty limited.
] "Elmo went to the wrong fundraiser" - The Simpson | firewalls [
] Michael Richardson, Xelerance Corporation, Ottawa, ON |net architect[
] mcr at xelerance.com http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys
-----END PGP SIGNATURE-----
More information about the Dev